FINDING · EVALUATION
The paper presents a repeatable method for confirming which specific URL filtering product is used for censorship: create test domains under researcher control, submit a subset to the vendor's public URL categorization interface, then retest within 3–5 days to observe whether submitted domains become blocked. This technique confirmed McAfee SmartFilter in UAE (Etisalat, AS 5384) and Saudi Arabia (Bayanat Al-Oula AS 48237, Nournet AS 29684), and Netsweeper in Qatar (Ooredoo AS 42298), UAE (Du AS 15802), and Yemen (YemenNet AS 12486).
From 2013-dalek-method — A Method for Identifying and Confirming the Use of URL Filtering Products for Censorship · §4.2, Table 3 · 2013 · Internet Measurement Conference
Implications
- Circumvention tool operators should submit probe domains to commercial URL filter categorization APIs to audit whether their infrastructure is already categorized as 'proxy anonymizer'—blocking propagation takes only 3–5 days
- Hosting circumvention endpoints on major cloud providers (AWS, GCP, Azure) makes it harder for vendors to reject categorization submissions without collateral damage to legitimate traffic
Tags
Extracted by claude-sonnet-4-6 — review before relying.